mpls address label mapping.pcapng.cap 708 bytes

MPLS address label mappings communication over TCP (here R6 to R5)
In this packet we can see the address bound to that neighbor (R6) in the address list TLV.
Also the address and labels are encoded as TLV(type length value).
We should remember that the transport address of the neighbor should be reachable and not mpls router ID, because the TCP handshake is done via transport address and not MPLS router id.
The address label mapping is exchanged once the TCP handshake is done.

DNS Question & Answer.pcapng.cap 1.6 KB

bgp as confed sequence.pcapng.cap 432 bytes

AS confederation sequence set in the BGP updates. Confederations are used to minimize IBGP mesh between BGP speakers but IBGP rules apply between EBGP sub confederation peers. AS confederation sequence are an ordered list of Autonomous systems passed within confederations.

bgp orf prefix advertisement.pcapng.cap 336 bytes

BGP prefix list sent during route refresh when outbound route filtering is configured.
here we clearly see whether the prefix list is add or delete and permit or deny.
Also we can see the actual network/mask sent.

hdlc slarp.pcapng.cap 612 bytes

We can have our serial interface automatically assign itself ip address from neighbor router, like DHCP for serial interfaces.which is called as SLARP(serial line address resolution protocol).Here is a packet capture of slarp and the router requesting the addresss and mask from neighbor router.Also the neighboring router responds with its own ip address and mask and this router looks into the mask and assigns itself the next available ip address from the subnet.

icmp fragmented.cap 106.4 KB

pinged google.com with -l option in windows which allows us to set the data size of the packet.Data size of 15000 bytes has been chosen and we can see that it is fragmented through the network into a maximum data size 1480 bytes in each packet.We can also see offset and identification field set in the ip header.